Fortinet NSE4_FGT-6.0 問題集

質問 1：
View the exhibit.

Which users and user groups are allowed access to the network through captive portal?
A. Users and groups defined in the firewall policy.
B. Only individual users - not groups - defined in the captive portal configuration
C. All users
D. Groups defined in the captive portal configuration
正解：A

質問 2：
Which is a requirement for creating an inter-VDOM link between two VDOMs?
A. The inspection mode of at least one VDOM must be proxy-based.
B. Both VDOMs must operate in NAT mode.
C. At least one of the VDOMs must operate in NAT mode.
D. The inspection mode of both VDOMs must match.
正解：C

質問 3：
Which of the following statements about central NAT are true? (Choose two.)
A. Destination NAT, using central NAT, requires a VIP object as the destination address in a firewall.
B. Central NAT can be enabled or disabled from the CLI only.
C. IP tool references must be removed from existing firewall policies before enabling central NAT.
D. Source NAT, using central NAT, requires at least one central SNAT policy.
正解：B,C

質問 4：
Examine the exhibit, which contains a session diagnostic output.

Which of the following statements about the session diagnostic output is true?
A. The session is in TIME_WAIT state.
B. The session is in ESTABLISHED state.
C. The session is in LISTEN state.
D. The session is in CLOSE_WAIT state.
正解：B

質問 5：
What FortiGate components are tested during the hardware test? (Choose three.)
A. CPU
B. Administrative access
C. HA heartbeat
D. Network interfaces
E. Hard disk
正解：A,D,E

質問 6：
View the exhibit:

The client cannot connect to the HTTP web server. The administrator ran the FortiGate built-in sniffer and got the following output:

What should be done next to troubleshoot the problem?
A. Capture the traffic using an external sniffer connected to port1.
B. Execute a debug flow.
C. Execute another sniffer in the FortiGate, this time with the filter "host 10.0.1.10".
D. Run a sniffer in the web server.
正解：B

質問 7：
An employee connects to the https://example.com on the Internet using a web browser. The web server's certificate was signed by a private internal CA. The FortiGate that is inspecting this traffic is configured for full SSL inspection.
This exhibit shows the configuration settings for the SSL/SSH inspection profile that is applied to the policy that is invoked in this instance. All other settings are set to defaults. No certificates have been imported into FortiGate. View the exhibit and answer the question that follows.

Which certificate is presented to the employee's web browser?
A. The user's personal certificate signed by a private internal CA.
B. The web server's certificate.
C. A certificate signed by Fortinet_CA_SSL.
D. A certificate signed by Fortinet_CA_Untrusted.
正解：D

質問 8：
Why does FortiGate keep TCP sessions in the session table for some seconds even after both sides (client and server) have terminated the session?
A. To remove the NAT operation.
B. To generate logs
C. To finish any inspection operations.
D. To allow for out-of-order packets that could arrive after the FIN/ACK packets.
正解：D